Privacy Policy

We collect only what we need to run the service and control your pool:

• Account information. When you sign in with Google or Apple, we receive your name, email address, and profile photo. Authentication is handled by Supabase.
• Your iAqualink credentials. To control your pool, you provide your iAqualink (Jandy) username and password. We store these encrypted and use them only to send commands to your pool on your behalf.
• Pool and device data. Equipment state, water and air temperatures, heating and pump runtime, energy history, an activity log of actions, and periodic snapshots of your system’s state.
• Notifications and sessions. If you enable push notifications, we store an Apple Push Notification device token. The iOS app stores session tokens to keep you signed in.
• Subscription information. Subscriptions are processed by Apple. We receive your subscription status and transaction identifiers — never your card or payment details.
• Usage and technical data. We use Google Analytics to understand how the app is used, and our hosting providers log standard technical data such as IP address and device or browser information.

We use the information above to:

• operate pool·heater and carry out the pool commands you request;
• send you notifications you’ve enabled (e.g. system or heating alerts);
• manage your subscription and access;
• keep the service secure and prevent abuse; and
• understand usage and improve the app.

Your iAqualink credentials are encrypted at rest. Data is stored with our infrastructure providers, Supabase (database) and Vercel (hosting), in the United States. Decisions about what you can access or control are enforced on our servers, not in your browser or app.

We do not sell your personal information. We share data only with the service providers that make pool·heater work:

• Apple and Google — sign-in, and (for Apple) subscriptions and push notifications;
• Supabase and Vercel — database and hosting;
• Jandy / iAqualink — we send your pool commands to their cloud using your credentials;
• Google Analytics — anonymized usage analytics.

We may also disclose information if required by law.

We retain pool telemetry and activity for limited periods to provide history and energy features. To request access to, correction of, or deletion of your account and data, email us at support@pomello.app and we’ll take care of it.

• Disconnect iAqualink. Removing a connected system deletes the stored credentials for it.
• Notifications. Turn push notifications on or off in the app or in your device settings.
• Access and deletion. Contact support@pomello.app for any request about your data.

pool·heater is not directed to children under 13, and we do not knowingly collect their data.

We may update this policy from time to time. When we do, we’ll revise the “Last updated” date above.

Questions about privacy? Email support@pomello.app.